AWS Budgets (IAM)

AWSbudgetsmanagement

AWS Budgets allows you to set custom budgets to track your cost and usage and receive alerts when thresholds are exceeded.

iamaws

docs ↗

Permissions

Actions in this service

budgets:DescribeBudgetAction

budgets:DescribeBudgetActionHistories

budgets:DescribeBudgetActionsForBudget

budgets:DescribeBudgetActionsForAccount

budgets:ListTagsForResource

budgets:TagResource

budgets:UntagResource

Policy

Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "budgets:DescribeBudgetAction", "budgets:DescribeBudgetActionHistories", "budgets:DescribeBudgetActionsForBudget", "budgets:DescribeBudgetActionsForAccount", "budgets:ListTagsForResource", "budgets:TagResource", "budgets:UntagResource" ], "Resource": "*" } ] }

SDK mapping

Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns

Known gotchas

Avoid budgets:* — grants full control including creating, updating, and deleting budget actions

Avoid budgets:CreateBudgetAction and budgets:DeleteBudgetAction — can create or remove automated budget responses

Resources

docshttps://servicereference.us-east-1.amazonaws.com/v1/budgets/budgets.json ↗